This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa
File:                     326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          8SUYpJXFSl2DDStwEGb1ZAliYSW0qeK38BnzRin2H38=
Subject key identifier:   EE:1B:6F:66:31:DC:D4:86:F3:9C:25:22:24:0A:D8:01:DE:7A:90:FB
Certificate issuer:       /CN=65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097
Certificate serial:       5C7208469F52BA90B8A62A2633A14D15DDDDE38C
Authority key identifier: 65:AC:7E:7F:A3:98:76:E7:BE:D5:EC:14:ED:19:5E:3E:9C:BB:70:97
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Sun 11 Jan 2026 00:54:10 +0000
ROA not before:           Sun 11 Jan 2026 00:49:10 +0000
ROA not after:            Sun 10 Jan 2027 00:54:10 +0000
asID:                     211575
IP address blocks:        2a0f:1cc5:fff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:72:08:46:9f:52:ba:90:b8:a6:2a:26:33:a1:4d:15:dd:dd:e3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097
        Validity
            Not Before: Jan 11 00:49:10 2026 GMT
            Not After : Jan 10 00:54:10 2027 GMT
        Subject: CN=EE1B6F6631DCD486F39C2522240AD801DE7A90FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:a9:d3:b5:4f:0f:e3:a6:f1:7b:eb:e5:e0:
                    3c:a9:86:4c:71:bd:48:62:f1:63:69:86:4a:b7:eb:
                    f2:d0:46:61:d6:3f:6a:3f:2b:3a:52:39:22:41:7e:
                    7b:fd:b6:48:cc:31:54:b5:81:7c:b6:82:4c:01:fb:
                    54:16:f7:ac:52:14:53:3d:91:09:49:a0:fe:b9:e7:
                    eb:c9:dd:74:79:ca:ba:ab:02:f6:f3:63:46:02:6d:
                    07:a1:67:5c:79:78:13:77:f2:32:84:e7:61:66:a9:
                    a0:0c:55:9d:3d:74:f2:df:cf:c1:77:87:f4:75:74:
                    12:60:4a:a8:0d:39:6c:9e:27:0b:c1:28:10:c7:3f:
                    97:a6:c5:0d:8c:18:b3:cc:4f:97:ed:02:cf:03:5b:
                    f4:f8:7e:bc:09:42:a6:13:5c:d4:1d:50:7f:38:59:
                    e9:c8:84:ed:23:34:e3:ff:5d:14:af:99:75:1d:0b:
                    a8:7a:fc:1a:f1:fe:fa:c6:33:21:b3:bc:95:a7:da:
                    1f:67:6d:42:16:34:63:b8:f2:c8:e1:eb:4c:c7:be:
                    8e:4e:a2:2d:c4:87:07:00:88:79:73:e6:3a:a0:7f:
                    67:77:e2:0e:f8:be:57:95:eb:24:df:e0:3b:6c:54:
                    fb:3a:1b:c1:bb:41:d3:c9:7b:e4:73:52:75:5f:ad:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:6F:66:31:DC:D4:86:F3:9C:25:22:24:0A:D8:01:DE:7A:90:FB
            X509v3 Authority Key Identifier:
                keyid:65:AC:7E:7F:A3:98:76:E7:BE:D5:EC:14:ED:19:5E:3E:9C:BB:70:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:df:fa:26:8c:63:41:62:a8:8c:17:26:68:43:11:51:69:
         6a:9a:c1:56:1d:d7:d4:3f:e7:64:a9:9e:0c:3d:1b:77:98:65:
         65:ff:46:6c:d0:20:e4:4b:ce:1e:dd:e7:9f:90:c1:26:6f:65:
         cf:ee:d5:42:79:98:ef:12:81:fb:c3:80:39:b1:f0:30:97:6e:
         2b:d5:0d:f4:f3:20:af:80:48:c2:fe:1f:8e:6b:f0:6e:93:c4:
         21:bc:fa:85:cf:ee:94:5a:a5:cf:a8:06:16:d3:06:6f:ad:e1:
         85:e4:58:00:96:a4:57:21:64:01:c1:ac:86:6c:83:1b:b2:f7:
         75:03:38:a3:af:11:4a:e6:08:61:a6:46:72:60:b4:4f:05:93:
         fd:a9:31:3e:5b:3d:d0:4f:27:83:44:f4:9a:a4:00:85:bb:e9:
         6c:3e:dc:07:76:30:36:19:f4:0f:d6:cf:84:7a:d5:c1:5e:9f:
         c1:62:24:a7:13:d8:f4:d4:ef:78:53:6d:c9:e6:67:44:57:06:
         f2:67:2b:a3:0d:13:3e:d2:5d:df:a1:86:2d:73:db:c4:5b:dd:
         ee:df:9e:4b:60:72:e2:bc:b7:d7:22:52:54:52:91:b5:86:15:
         da:67:30:87:e1:70:d1:d4:41:00:9b:7e:25:64:49:d1:39:99:
         79:36:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:07:22 2026 by rpki-client